# # http://html5sec.org # retreieved 2013-11-06 test 1
# obsolete firefox 3 #test 2 &ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi # obsolete firefox 3 #test 3 &alert&A7&(1)&R&UA;&&<&A9&11/script&X&> test 4
test 5
test 6
test 7 test 8 test 9 X test 10 test 11
test 12
...
# opera only, only "DoS" # test 13 01 # opera only, "DoS" # test 14 test 15
test 16 X test 17 test 18
# obsolete firefox 3 # test 19 ¼script ¾alert(1)//¼/script ¾ test 20
test 21
test 22 test 23
test 24 1 test 25
;1 # obsolete firefox 4 and under # test 26 +ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),alert(RegExp.input); test 27
test 28 1 test 29 @import "data:,*%7bx:expression(write(1))%7D"; test 31_1 test 31_2
test 32

test 33 XXX XXX test 34 1 test 35 1 test 36 XXX test 37 test 38 # obsolete, FF 3.6 and Opera 11 #test 39_1 test 39_2
test 40
test 41
test 42
XXX
test 43
test 44
X test 45
XXX
test 46
XXX
test 47
test 48
test 49 test 50 test 51 test 52 test 53_1 test 53_2 test 54
test 55_2 test 56 # # Obsolete.. Firefox 3.6, Chrome 5, Safari 4 # # test 57 alert(1)//0 # # Obsolete Firefox 3.6 # #test 58 test 59
# we reject all styles # test 60 TBD Obfuscation css-properties and values via ignored extra characters # we reject all styles # test 61 TBD CSS encoding and escaping # IE9 parses this as NOT-XSS # # # test 62_1 # # IE9 parses this as XSS # # test 62_2 # # IE9 parses this as XSS as previous # test 62_3 # bonus -- correctly detected test 62_4 # bonus -- quotes reversed # same as 62_2 test 62_5 # bonus - use of backquotes test 62_5 # bonus "> "> "> "> test 63_1 // O10.10↓, OM10.↓, GC6↓, test 63_2 test 63_3 // IE6, O10.10↓, OM10. test 63_4
// IE6, O11.01↓, OM10. test 64_1 ]>&x; test 64_2
test 65
test 66 test 67 ]> test 68 XXX test 69 test 70
x
test 71 test 72
test 73 test 74 test 75 test 76_1 &x; test 72_2 test 77 test 78 test 79 # test 80 TBD IE6 and halfwidth/fullwidth Unicode characters test 81 test 82 test 83 test 84 test 86
test 86
test 87 test 88_0